Wednesday, February 15, 2017


PASSWORDS

The first thing you should do after configuring your system is change the default passwords. PELinux allows su as well as password-less sudo, so it's really quite important for, er, um, well, security reasons. I hate using the word "security" in the post-inside-job world but giving it some thought is required now-a-days.

pi@jessie-rpi:~$ su
Password: debian
root@jessie-rpi:/home/pi# passwd
Enter new UNIX password:
Retype new UNIX password:
passwd: password updated successfully
root@jessie-rpi:/home/pi# passwd pi
Enter new UNIX password:
Retype new UNIX password:
passwd: password updated successfully
root@jessie-rpi:/home/pi# exit
exit
pi@jessie-rpi:~$


There's one more, the default keyring password is "pi", to change it go to:
Menu --> Accessories --> Passwords and Keys

Right click the default keyring and select "change password" from the pop-up menu.


It's also not a bad idea to create a non-admin user account if you intend to surf the dark webzes. If malicious web software hoses you just delete "surfer" (that's what I call mine) and his entire home directory. Much easier than restoring your last backup over and over again. ;)

Tuesday, February 14, 2017

R3 FOR PI3 IS OUT

Privacy Enhanced Linux R3 is pure Linux.. mostly Debian version 8 with a little 9 and a dash of Mint. It supports all Raspberry Pi 3 features with it's ultra-stable, modern kernel. The direct download link is:

https://drive.google.com/open?id=0B_8WsV7ZWJa1N2drMy1qcWF0c00

2.2 GB ZIP file expands to a 7.2 GB IMG file so make sure you have 10 GB free on a filesystem that supports big files. Most flash drives use FAT which has a 2 GB file size limit.

2192173577 Feb 14 05:19 privacyenhancedlinux_2-14R3.zip
shasum 11d2d52f9653b5c2c69312593637ba428316bfb3
md5sum 5b1923d97127f0535ebc6ac1f7f6236a

7246708736 Feb 14 05:09 privacyenhancedlinux_2-14R3.img
shasum 16d30e6832a525b1ecb9f903457f2edfb7b979cc
md5sum e56fa2b859b4265dac86d6a95b96b1c6

KNOWN ISSUES


Pi 3 Bluetooth hicups a little first couple minutes but then smooths out. My Panda BT 4.0 adapter doesn't have this problem and my Pi 2 is still the main MP3/audio player the house. I paid $15 for the Panda though and another $10 for an EDIMAX WiFi dongle, so I guess I can't complain too much. It's like $25 worth of extra stuff for free.

Locales package doesn't update correctly. I'm using the testing version so it shouldn't need updating much but whenever it does immediately afterwards do the following:

sudo cp ~/Public/pelinux/patches/locale.gen /etc/
sudo locale-gen

That's really the only package on hold you should ever unhold, unless you really know what you're doing. I've included everything I could think of in the same patches directory above, though. Just in case you hose up your system you can try to re-apply my fixes manually.

Monday, February 13, 2017

PACKAGE "BACKPORTS" SUCK

I really don't understand why PulseAudio 7 is in backports when Debian 9 isn't going to use that version. Backported from where exactly? Testing I can understand and FYI they changed from PulseAudio 9 to 10 so it looks like that's what you peeps are gonna get. You heard it here first! And though I like my way of including ALL modules I guess I did miss a dependency or two. For example, I compiled the Privacy Enhanced Linux version of Pulse with OpenSSL support but didn't include that as a required package. So I can see it both ways now and R3 will use the "official" packages.

Unfortunately my efforts to keep extra packages out of the xorg upgrade process didn't work. FWIW though, you'll find two new files in the /etc/apt/preferences.d/ directory, one called jessie.pref and the other stretch.pref which pin stable above testing. I guess it's version dependencies bringing in things like systemd 230. At this point it's only really a problem for users of HID touchscreens though, other users won't notice, so I'm leaving that issue behind.

Looks like release day is TOMORROW! ;)

Privacy Enhanced Linux R3 running on a Raspberry Pi 3 using built-in Bluetooth and WiFi

Sunday, February 12, 2017

MAYBE NEITHER

I guess the train already left the station on "pure" Debian when I added Linux Mint's Bluetooth manager to R2. And kernel 3.18 has reached end-of-life so while it's still rock solid it's not bleeding edge and backporting stuff to it is a waste of time. Therefore, the time has come for R3 which is:

Debian 8.7 stable
Kernel 4.4.48 (Feb 10th 2017, ARMHF 32bit)
VideoCore 3D acceleration enabled (default 320M mem)
Pi3 WiFi enabled
Pi3 Bluetooth enabled
Analog Audio enabled
Bluetooth Audio enabled
Linux Mint Blueberry Bluetooth Manager
PulseAudio 10 (maybe)
Xorg 1.18.4 (maybe)

This is the last Debian version as I'm switching to Gentoo. Final testing in progress, everything that doesn't say "maybe" is working perfectly... I don't wanna brag but you're not gonna wanna go back to Raspbian. :D

Here are some reviews from our beta testers:

"You can't tell because of this rag on my head but my hair is standing straight up right now." - Yousef al-Shiskabob, senior al-Qaeda recruiter.

"All our Islamic State Peacekeepers use Raspberry Pis running Privacy Enhanced Linux. It helps keep them safe and secure from the Zionist extremists. It's true, I swear!" -- anonymous official from the Islamic State Defense Force.

Saturday, January 28, 2017

MAYBE BOTH

16.04 LTS derivatives are feature locked on PulseAudio 8 and Debian 9 which isn't even out yet is locked into version 9. I need PulseAudio 10 but also want to keep a "pure" Debian version of PELinux. So newest plan is an R3 upgrade script that will keep you pure Debian AND a new image that will be "Debian-based" like Ubuntu but with some different packages.

TEASER

THIS IS NOT FOR RASPBERRY PI! It's AMD/Intel 64-bit but the armhf.deb package I'll make later will work exactly the same way.

PulseAudio 10 for 16.04 LTS by Privacy Enhanced Linux

https://drive.google.com/open?id=0B_8WsV7ZWJa1MTg0RHphWEtTWms

pulseaudio_10.0-pelinux-1_amd64.deb
shasum f5368d65dea39ea5826799472d2e2b15f9b0ec81
md5sum 67ccbc20dae06736ac10e8be33d3a294

To properly manage all the dependencies, you should install Pulseaudio 8 or 9 FIRST then download above package and:

sudo dpkg -i pulseaudio_10.0-pelinux-1_amd64.deb

sudo apt remove pulseaudio-module-bluetooth pulseaudio-module-x11 pulseaudio-module-droid pulseaudio-module-gconf pulseaudio-module-jack pulseaudio-module-lirc pulseaudio-module-raop pulseaudio-module-trust-store pulseaudio-module-zeroconf pulseaudio-utils

sudo apt-mark hold pulseaudio pulseaudio-module-bluetooth pulseaudio-module-x11 pulseaudio-module-droid pulseaudio-module-gconf pulseaudio-module-jack pulseaudio-module-lirc pulseaudio-module-raop pulseaudio-module-trust-store pulseaudio-module-zeroconf pulseaudio-utils

sudo rm /etc/xdg/autostart/pulseaudio.desktop

sudo apt update

sudo apt upgrade

reboot 

To verify you're running version 10:

pulseaudio --version

Only tested it on Xubuntu 16.04.1 but should be same with other flavors.

Saturday, January 14, 2017

MAYBE R3 UPGRADE

I compiled the 3D side of the stack from source and made armhf.deb packages only to find the testing repo already has the latest and greatest. Follow my earlier blog post (the pulseaudio sux one) to install libdrm-dev and mesa from there. It was a good exercise anyway. 2D acceleration is still a problem but 9 isn't done yet so I might not need to do anything with that either. New plan is to make an R2 to R3 upgrade script instead of another image. Still might make custom pelinux packages for systemd/udev sans stoopid names, however. And when 9 is released and testing no longer gets updated, the following might come in handy:

ADVANCED USERS

Here's how I made the libdrm-dev package.

mkdir ~/Code
cd ~/Code
git clone git://anongit.freedesktop.org/git/mesa/drm

cd drm
./autogen.sh --prefix=/usr/ --enable-udev --libdir=/usr/lib/arm-linux-gnueabihf/
make
sudo checkinstall -D make install


Unfortunately it looks like Debian made tiny little packages for each driver in libdrm so it's dependency hell if you dpkg -i --force-install the full set, but it works.

Thursday, January 12, 2017

HOW CAN YOU BE SURE?

When they use their credentials instead of actual proof to back-up their "conclusions"/lies you can be 100% sure. I doubt any of these so-called "journalists" could name half a dozen spy agencies without some kind of cheat sheet, 17 is absurd. Heck, if numbers and organizational acronyms are proof of something then I guess 9-11 TRUTH must be FACT because THOUSANDS of experts with degrees representing HUNDREDS of organizations say so: http://www.ae911truth.org/

This will be the end of the debate on the subject.

The debunkers have been completely debunked. :P